CanonメーカーPaper Shredderの使用説明書/サービス説明書
ページ先へ移動 of 37
INTENT OF THIS DOCUMENT: Canon r ecogniz es the importance of information security and the challenges that your organiz ation faces. This white paper pr ovides information se curity facts for Canon imageRUNNER AD VANCE systems.
2 White Paper: Canon imageRUNNER ADVANCE Security 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 2. Devic e Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3 White Paper: Canon imageRUNNER ADVANCE Security Section 1 — Intr oduction “If you look at these machines as just copiers or printers, you first wonder if you really need security.
1.1 — Security Mark et Overview In today’s digit al world, risks to networks and dev ices come in more forms and from more directions than ever before.
2.1 – imageRUNNER AD V ANCE C ontro ller Security The imageRUNNER AD V ANCE series i s built upon a new pl atform that pro vides powerful enhanc ements to security and productiv ity.
Canon im ageRUNNER ADV ANCE systems also ship w ith S SO-H, which supports direct authentication again st an Active Directory domain u sing Kerber os or NTLMv2 as the authentication protoc ol.
2.3 – Acc ess C ontr ol Canon im ageRUNNER ADV ANCE systems sup por t a number of acc ess c ontrol options to help you manag e the use of devic e settings and function s in addition to specific capabilities of certain functions. A cc ess c ontrol solution s for the imageRUNNER AD V ANCE c an help Authentication, Authorization, and Auditing.
The following describes the various Ba se a cc ess levels (roles) that are available: The followin g functions and feat ures can be re stricted: 8 White Paper: Canon imageRUNNER ADVANCE Security Secti.
When the Acc ess Management Sy stem has been enabled, users must log in to the devic e using SSO user authentication. A cc ess Man agement System s upports authentication through local device authentication as well a s Active Directory using SSO-H*, whic h includes s upport for Kerberos Authentication.
Ac cess C ode for Addres s Book End-users w ill also have the c apacity t o place an ac ce ss number code on a ddresses in the Addr ess Book. When regi stering an addres s, users can then enter an Ac ce ss Number to restrict the display of that entr y in the Address Book.
Print Driv er Security F e atur es Print Job Ac cou nting A standard fe ature in C anon’s printer drivers, print job ac cou nting requires users to enter an administr ator-defined passw ord prior to printing, thereby restricting devic e acc ess t o those authorized to print.
Protecting your or ganization’s c onfidential information i s a miss ion that C anon take s seriously . From your documents, f axes and e-m ails to the underly ing data on the intern al hard disk drive and in memory, C anon has built in many controls to help ensure that y our information does not become c ompromised.
Document St or ag e Sp ac e Pr ot ection Mail Box Security Eac h imageRUNNER AD VANC E system ships s tandard with Mail Bo xes for storage of sc anned and printed data. Mail Bo x security is provided by the ability to designate a u nique password for ac ces s.
14 White Paper: Canon imageRUNNER ADVANCE Security Administrators can mana ge the Advanced Bo x f eature through the Remote UI interf ace and perform the followin g actions: • Create user ac cou nts and define type (Admin vs.
15 White Paper: Canon imageRUNNER ADVANCE Security Digital Signature PDF (Dev ice and U ser Signat ure) Within Scan and Send, users can ad d digital sign atures that verify the source and authenticity of a PDF or XPS document.
16 White Paper: Canon imageRUNNER ADVANCE Security The Sc an Loc k fe ature enab les the follo wing restrictions to be applied to a document: • Compl ete Restriction: No one can m ake any copy/send/fax. • Password Authentication: Allows the ability to make copy/send/f ax only if the proper password is e ntered.
17 White Paper: Canon imageRUNNER ADVANCE Security information from env ironments, where sensitive inform ation is proc essed, by an alyzing the hard disk s from these devic es.
HDD Data Era se Kit The optional HDD Dat a Erase Kit en ables sy stem administr ators to configure their imageRUNNER AD V ANCE to ov erwrite the internal image server hard disk and erase prev ious data as part of routine job proc essing. The tec hnology can be set to o verwrite: 1.
Please see below for o verwrite examples of what oc curs on the devic e in certain jo b modes using a jo b consi sting of three sets of three originals.
2 2 . . M M a a i i l l B B o o x x P P r r i i n n t t a a . . M M a a i i l l B B o o x x P P r r i i n n t t When a user prints a jo b stored in the Mail Bo x, all pag es wil l be overwritten immediately after the entire job h as printed out. 3 3 .
Essential s W orkflow C omposer Canon im ageRUNNER ADV ANCE Essentials includes the Workflo w Composer c omponent to enable u sers and administr ators to cre ate custom workflows that automate redu ndant task s and provide int egration with bac k -end systems via connectors.
3.3 – Fax Security S uper G3 F ax Boar d and M u lti Line F ax Bo ar d Canon im ageRUNNER ADV ANCE systems th at support S uper G3 fax c apabilities with the optional Super G3 Fax Board instal led can be connected to the P ublic Switc hed T elephone Network f or sending and receiv ing of fax data.
Advanc ed Box Fax Forwardin g & Fax Received Notific ation Similar to the Fax Forwarding function, im ageRUNNER ADV ANCE systems support the c apability to define separate forwardin g rules ba sed on the line upon which the f ax wa s receiv ed.
4.1 – Network and Print Security (C anon Network Printer Kit Only) Canon imag eRUNNER ADV ANCE sy stems include a number of highly configurable netw ork security featur es that assist in securing information when the optional Network Print Kit is in stalled.
IP Ad dr e ss Filt erin g Using the RX/Print Settings function, the Syst em Manager c an limit network acc ess to the dev ice to specific IP a ddresses or ranges for printing and Settings/Brow sing. Up to eight indiv idual or consecutiv e address settin gs can be spec ified.
See the imageRUNNER AD V ANCE syst em manual for the spec ific devic e in question for additional instructions on registerin g IPSec-based security policies. Authentication and Encryption Method: One of the follow ing methods must be set f or the device.
IEEE 802.1X Canon im ageRUNNER ADV ANCE systems support IEEE 802.1x, which i s a standard protoc ol for port- based Network Ac ces s C ontrol. The protoc ol prov ides authentication to devic es att ached to a LAN port and estab lishes a point-to-point connection only if authentication is s ucc essful.
There are three poss ible scen arios that are explored: • • D D a a t t a a w w i i t t h h a a v v i i r r u u s s a a t t t t a a c c h h e e d d i i n n t t h h e e e e - - m m a a i i l l : : All fil e attachments exc ept for ‘TIFF” files r ecei ved in the e-mail are di scarded immediately after rec eption.
Canon pro vides a number of t ools to help organiz ations enf orc e their internal company polic ies and meet regul atory requirements. Whether a single imag eRUNNER ADV ANCE sy stem is deplo yed, or .
Few security pr ocedures can compl etely prevent the intention al leak of c onfidential information while maintainin g high productivity , but if an oc currenc e does happen it is important to be ab le to trac e it to the sourc e.
6.2 – Canon im ageWARE Acc ounting Manag er Canon im ageWARE Ac cou nting Manager pro vides enh anced audit tr acking c apabilities t o the end-user environment.
Canon i s dedicated to pro viding the most sec ure mu ltifunctional printers available on the m arket today . Many of our products meet or ex ceed the requirements of government ag encies and priv ate entities as they relate to sec urity certification s and industry regul ations.
7.3 – Authorized Send for CAC/PIV Designed to meet the needs of the United States D epartment of Defense and numerous government agencies, the Authoriz ed Send for CA C/PIV option for imag eRUNNER A.
Since initial ly introduced, the high ly succ essful Canon imag eRUNNER series of devic es h ave rapidly grown in both the breadth and depth of features and functions. With e ach rele ase, these devic es have become incre asingly integrated within the IT and network infras tructure.
9.1 – Canon Security R ecommendations Quic k R eferenc e Each c ustomer’s needs are different, and while the security of c orporate data is ultimately the respon sibility of the customer, the sec urity tec hnologies outlined below ma y help support your organiz ation's information security need s.
36 White Paper: Canon imageRUNNER ADVANCE Security 9.2 – Canon im ageRUNNER AD V ANCE HDD Security Section 9 – Addendum C ommon Crit eria C ertification EAL3 N/A Supported Device s iR ADV C5051, C.
The information prov ided in this document is the most current information av ailable at the time of its creation. C anon hereby expre ssly disc laims all w arranties of any kind, expres s or implied, statutory or non-st atutory, in relation to the information prov ided in this document.
デバイスCanon Paper Shredderの購入後に(又は購入する前であっても)重要なポイントは、説明書をよく読むことです。その単純な理由はいくつかあります:
Canon Paper Shredderをまだ購入していないなら、この製品の基本情報を理解する良い機会です。まずは上にある説明書の最初のページをご覧ください。そこにはCanon Paper Shredderの技術情報の概要が記載されているはずです。デバイスがあなたのニーズを満たすかどうかは、ここで確認しましょう。Canon Paper Shredderの取扱説明書の次のページをよく読むことにより、製品の全機能やその取り扱いに関する情報を知ることができます。Canon Paper Shredderで得られた情報は、きっとあなたの購入の決断を手助けしてくれることでしょう。
Canon Paper Shredderを既にお持ちだが、まだ読んでいない場合は、上記の理由によりそれを行うべきです。そうすることにより機能を適切に使用しているか、又はCanon Paper Shredderの不適切な取り扱いによりその寿命を短くする危険を犯していないかどうかを知ることができます。
ですが、ユーザガイドが果たす重要な役割の一つは、Canon Paper Shredderに関する問題の解決を支援することです。そこにはほとんどの場合、トラブルシューティング、すなわちCanon Paper Shredderデバイスで最もよく起こりうる故障・不良とそれらの対処法についてのアドバイスを見つけることができるはずです。たとえ問題を解決できなかった場合でも、説明書にはカスタマー・サービスセンター又は最寄りのサービスセンターへの問い合わせ先等、次の対処法についての指示があるはずです。